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U.S. Election Assistance Commission 
Dear Mr. Abbott: 

The integrity of Iowa's elections is the top priority for Secretary of State Paul D. Pate 
and his staff. These HAVA funds will be used for that purpose. 

Secretary Pate has taken numerous steps to bolster election security in Iowa. That 
includes unprecedented partnerships with county, state, and federal entities. The Iowa 
Election Cybersecurity Working Group created by Secretary Pate is comprised of a 
variety of experts and stakeholders who are committed to protecting the integrity of 
the vote. 

Working with the Iowa Legislature and Governor Reynolds, Secretary Pate has begun 
the process of replacing the state's voter registration database, I-VOTERS. Iowa’s 
HAVA match funds will be used for cybersecurity protections related to this project. 

It is vital to build a human firewall that is just as robust as a technological one. 
Secretary Pate is partnering with all 99 county auditors to ensure the protection of our 
elections on every level. 

Almost 60 percent of Iowa's HAVA funds will be committed to benefiting Iowa counties. 
That equates to nearly $3 million. Secretary Pate is working to implement a two-factor 
authentication requirement for access to I-VOTERS. The database is utilized by all 99 
counties. Additionally, cybersecurity training will become mandatory for all I-VOTERS 
users. 

Secretary Pate is partnering with the U.S. Department of Homeland Security and the 
Office of the Chief Information Officer to provide robust cybersecurity protection and 
resources for all 99 counties. Highly-attended workshops have been conducted to 
inform counties about these resources. The goal is to have every county implement 
these protections, in addition to the ones they already utilize, in advance of the 
November elections. 

These plans for the HAVA funds remain fluid and will be based on immediate and 
long-term needs. Cybersecurity is a race without a finish line and Iowa intends to lead 
this race. First in the nation in voting demands first in the nation security. Secretary 
Pate and his staff are fully committed to protecting the integrity of Iowa's elections. 

Sincerely, 

Molly M. Hammer 
Legal Counsel 
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Introduction 


The overarching mission of the Iowa Secretary of State is to administer lawful, fair, 
impartial, and secure elections. Secretary Pate wants every eligible Iowan to register to 
vote and participate in our elections. The greatest challenge over the past two years has 
been to ensure that every possible measure has been taken to protect Iowa’s election 
infrastructure, including the state voter registration system, election night reporting 
system, and public-facing website, as well as the election infrastructure of all 99 Iowa 
counties. 

The Iowa Secretary of State has been working closely with federal, state, and local 
partners to harden the cybersecurily and human security of Iowa’s election 
infrastructure. Active partners include the U.S. and Iowa Depeuiments of Homeland 
Security, Federal Bureau of Investigation, Election Infrastructure - Information Sheuing 
and Analysis Center, Center for Internet Security, U.S. Election Assistance Commission, 
Iowa National Guard, Iowa Intelligence Fusion Center, Iowa Office of the Chief 
Information Officer, Iowa State University Information Assurance Center/Iowa Cyber 
AUismce, private vendors, and county auditors and IT officials. The Secretary has 
appointed several of these partners to the Iowa Election Cybersecurity Working Group, 
whose purpose is to advise the Secretary on election cybersecurity. 

Through these partnerships, the Iowa Secretary of State is working to build robust 
technological and human firewalls both at the state level, and in all 99 Iowa counties. 
The Secretary will use the $4.8 million in federal and state HAVA funds to improve 
election administration, harden election security, and increase accessibility. An 
emphasis will be placed on providing resources and support to Iowa’s 99 counties, with 
an effort to identify and encourage the use of best practices. The HAVA funds provide 
a unique challenge and opportunity to ensure the integrity of Iowa’s elections for years 
to come. 

The State of Iowa’s matching funds were appropriated through the Rebuild Iowa 
Infrastructure Fund (RIIF). The money will be used to replace I-VOTERS, Iowa’s 
statewide voter registration system. The project is currently in the research phase, but 
the RFP process is expected to begin in 2019. The matched funds will be expended on 
cybersecurity protections for the statewide voter registration system. 

HAVA Program Initiatives 


A. Votins Eqmpment 

Voters in Iowa cast paper ballots that are counted with the use of ballot scanners at 
each precinct. The same process is utilized at county election offices for absentee ballots. 
In addition, each precinct is required to have a ballot-marking device that meets federal 
accessibility standards. Decisions on type of election equipment are made by each 
county, from a list of approved and tested equipment managed by the Iowa Secretary of 
State. 

Over the past three years, the large majority of Iowa’s 99 counties have taken the 
initiative to update their election equipment. For this reason, and because counties 
have statutory responsibility and authority over the purchase and management of 
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election equipment, these funds will not be focused on the purchase and replacement 
of election equipment. 

B. Election Auditing 

Iowa will be conducting post-election audits beginning with 2018 General Election. 
These funds will be utilized to educate, carry out, and improve the audit process. They 
will also be utilized to investigate the benefits and costs of risk limiting election audits 
in the State of Iowa. 

C. Voter Registration 

Iowa has begun the process of joining the Electronic Registration Information Center, 
Inc. (ERIC). The benefits of participation in ERIC include more accurate and up-to-date 
voter lists, and a regular process to identify and encourage eligible, but unregistered, 
citizens to register to vote. These funds will be utilized for membership dues, 
programming costs related to ERIC, and required mailings associated with membership 
in the ERIC program. 

D. Cvbersecuritv 

HAVA funds will be used for a combination of statewide and county level measures. On 
a statewide level, the funds will be utilized for firewall upgrades, increased security for 
I-VOTERS, the statewide registration database, and to add additional staff members to 
better serve and assist counties as they seek to enhance their security measures. 

On a county level, the funds will be used to provide more secure access to I-VOTERS 
through implementation and utilization of two-factor authentication. The funds will also 
be used to explore improvements to technology and security equipment available to 
Iowa’s counties. 

The HAVA funds will allow the Iowa Secretary of State’s Office to continue and expand 
upon educational and training opportunities available to County Auditors, their steiff, 
and County IT professionals. Educational programming will include: The National 
Election Security Summit in St. Louis, yearly Cybersecurity summits with County 
Auditors and IT staff. Cyber Incident Tabletop Exercises, and County Incident Planning. 

E. Communication 


Communication efforts include improvements to the Elections portion of the Iowa 
Secretary of State’s website to provide for added security, functionality and accessibility. 
Additional funds will be used to encourage voter participation through voter education 
and to build the public’s confidence in the integrity of Iowa’s elections. 

F. Accessibility 

HAVA funds will be used, along with funds provided by Disability Rights Iowa, to provide 
Curbside Voting Signs to counties for use in front of precincts. Counties will also have 
the opportunity to apply for ADA compliance grants for use at polling sites. Additional 
funds will be used for outreach to the disability community, including organizations 
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that provide services to injured or disabled veterans, to help encourage registration and 
participation. 

G. Election Administration 


Funds will be used to continue eind enhance tredning for County Auditors and their staff, 
Precinct Election Officials and the Secretary of State’s staff. Funds going towards 
election administration will also be used to increase the efficiency, functionality and 
security of our Election Night Reporting Service. 

Activities to Occur Before or During the 2018 General Election Cycle; 

• Partnership with DHS on the “Last Mile Project,” to provide security posters for 
each of Iowa’s 99 counties 

• DHS assessments, including Risk and Vulnerability, Cyber Resilience Review, 
External Dependency Management, Infrastructure Survey, and Phishing 
Campaign 

• Joined DHS Information Network 

• Preform weekly vulnerability scan 

• Upgrades to firewalls protecting internal network 

• Joined the Electronic Registration Information Center, Inc. (ERIC) and will be 
sending out an Unregistered But Eligible (UBE) mailing by October 1, 2018 

• Two-factor authentication for I-VOTERS users 

• Develop and implement county level incident response plans 

• 2 table tops session were held in partnership with DHS for County Auditors, 
elections staff and county IT professionals 

• Create and distribute Curbside Voting Signs to counties for use at polling 
locations 

• Requiring “Securing the Human,” an online cybersecurity training progreim, to 
county level staff in partnership with the Iowa Office of the Chief Information 
Officer (OCIO) 

• Cybersecurity training opportunities for Secretary of State staff. County Auditors, 
elections staff, and county IT professionals through conferences at NASED, The 
Election Center, and The National Election Security Summit 

• The Iowa Secretary of State’s Office hosted two Cybersecurity Workshops for 
County Auditors, elections staff and county IT professionals to promote free 
services offered by the OCIO, DHS, and other state and federal partners 

• Post-election audits will be conducted following the General Election 

• Upgrades to Election Night Reporting system, including increased cybersecurity 
protections such as two-factor authentication 

• Hiring an Information Security Officer and Cyber Navigator 

• Partnering with OCIO to offer all interested counties malware protection and an 
intrusion detection system 

• Development of training tools for County Auditors, elections staff and precinct 
election officials 

• Development of communications aimed at reassuring the public confidence in 
the integrity and security of Iowa’s elections 

• Development of communications aimed at educating and encouraging voters with 
disabilities to vote, including veterans with disabilities 

• Creation of a Cyber Working Group with local, state and federal partners 


Phone 515-281-5204 
sos@sos.iowa.gov 


Fax 515-242-5953 


sos.iowa.gov 






2018 HAVA ELECTION SECURITY GRANT 

Budget Information 

CFDA ft 90.404 Non-Construction Program 

Name of Organization: 

Budget Period Start: 

Budget Period End: 

Iowa Secretary of St 

3/23/18 

FY 2023 

ate 

SECTION A- BUDGETSUMN 

FEDERAL & NON- 

^ARY (Consolidated Budget for total project term- 

FEDERAL FUNDS (Match) up to 5 years as defined by grantee) 

PROGRAM CATEGORIES 

BUDGET CATEGORIES 

(a) Voting 
Equipment 

(b) Election 
Auditing 

(c ) Voter 
Registration 
Systems 

(d) Cyber Security 

(e) Communications 

(0 Acessability 

(g) Election 
Administration 

TOTALS 

% Fed Total 

1, PERSONNEL (including fringe) 




$ 800,000.00 

$ 375,000.00 



$ 1,175,000.00 

25% 

2. EQUIPMENT 




$ 525,000.00 


$ 75,000.00 


$ 600,000.00 

13% 

3. SUBGRANTS- to local voting jurisdictions 






$ 200,000.00 


$ 200,000.00 

4% 

4. TRAINING 


$ 50,000.00 


$ 384,000.00 



$ 149,084.00 

$ 583,084.00 

13% 

5. All OTHER COSTS 


$ 150,000.00 

$ 250,000.00 

$ 600,000.00 

$ 675.000.00 

$ 125,000.00 

$ 250,000.00 

$ 2,050,000.00 

44% 

6. TOTAL DIRECT COSTS (1-6) 

$ 

$ 200,000.00 

$ 250,000.00 

$ 2,309,000.00 

$ 1,050,000.00 

$ 400,000.00 

$ 399,084.00 

$ 4,608,084.00 


7. INDIRECT COSTS (if applied) 








$ 

0% 

8. Total Federal Budget 

$ 

$ 200,000.00 

$ 250,000.00 

$ 2,309,000.00 

$ 1,050,000.00 

$ 400,000.00 

$ 399,084.00 

$ 4,608,084.00 


11. Non-Federal Match 



$ 230,404.00 





$ 230,404.00 


12. Total Program Budget 

$ 

$ 200,000.00 

$ 480,404.00 

$ 2,309,000.00 

$ 1,050,000.00 

$ 400,000.00 

$ 399,084.00 

$ 4,838,488.00 


13. Percentage By Category 

0% 

4% 

5% 

50% 

23% 

9% 

9% 






Proposed State Match 

5.0% 




A. Do you have an Indirect Cost Rate Agreement approved by the Federal government 
or some other non-federal entity? 

If yes, please provide the following information: 

B. Period Covered by the Indirect Cost Rate Agreement (mm/dd/yyyy-mm/dd/yyy): 




C. Approving Federal agency: 

D. If other than Federal agency, please specify: 

E. The Indirect Cost Rate is: 





























































